4eeed0577e361ffd2c62d4edd8200fe0 | Triage

Sharing

General

Target

4eeed0577e361ffd2c62d4edd8200fe0
Size

162KB
MD5

4eeed0577e361ffd2c62d4edd8200fe0
SHA1

7b7c3a5e87b6b365eb2b7d3358a9cb902f2b2da1
SHA256

e17cf96ab2d23a20b980f2cac200a02a8ae91b1c7954b6f8933fb12cdf0992b8
SHA512

bb691b5d6605627da49eac1debfa99c209d2d860555915ad20aa0a264213d1b77478bf08de2364afcb623da48e852d92e6c87b8cf41d707bdd1b775007a158bf
SSDEEP

3072:KglqVyxVy28Q68yAFkyhrK5WvN/qc+Nakq/+17ZA/xhpC/M:KSqVyvJldm56NCc+Nakq/U7rE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eeed0577e361ffd2c62d4edd8200fe0

Files

4eeed0577e361ffd2c62d4edd8200fe0
.dll windows:4 windows x86 arch:x86

4c3de1d56e0da543f80ba94ac4057dd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

wsprintfA

advapi32

OpenServiceA

msvcrt

_strcmpi

Sections

.text
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.01
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ